MEXC Account Breach Cost Me $54,000 in Crypto Assets

I have been a MEXC user for many years and check my account almost every day. On May 18, 2026, at around 5:00 PM, I tried to log into my account using my phone number. I received a message stating that my password was incorrect. After resetting my password and logging in again, I discovered that my entire balance had been emptied and all assets in my account had disappeared. Based on my review, this incident occurred on May 18, 2026, between approximately 4:46 PM and 5:05 PM.

My account held approximately $54,000 worth of cryptocurrency assets. For years, I have accessed my account from the same mobile phone and usually used the same device. Despite this, I noticed that my email address had been changed without my knowledge or consent, and there were no assets left in my account. I believe this incident occurred due to a security vulnerability on MEXC’s side.

I reported the issue to MEXC customer support. In their response, they provided a standard explanation stating that the platform only provides an environment for users to trade with one another, that it does not place orders on behalf of users, and that a successful login requires a password and verification code. They also stated that only someone with this information could have accessed my account. Additionally, they shared the blockchain withdrawal address where my assets were transferred, rsVda3gi9Mbp7XwwwnG5G5vngsNdDRUWB6, and told me that I could track the transfer myself and check whether the transactions were made by me or someone I know. However, I absolutely did not perform these transactions, and no one in my family or close circle carried them out either.

Despite the clear signs of a security breach, MEXC has attempted to close the matter with a response that places all responsibility on the user and provides no concrete step toward compensation. I used my account for years from the same device, received no unusual login warning, and yet lost a very significant amount of assets all at once.

I request that MEXC fully restore the approximately $54,000 worth of cryptocurrency assets withdrawn from my account without my knowledge or authorization, based on the exact coins held in my account. I also demand a transparent and detailed investigation into this security breach, including how my email address was changed, how the withdrawals were approved, and why no effective security warning or protection was triggered.